CVE-2021-33045 Dahua Loopback global.login Auth Bypass

Ibrahim Saud@tektrix

•updated Sep 20, 2026•0•0•4

This rule detects an attempted authentication bypass vulnerability (CVE-2021-33045) targeting Dahua NetKeyboard devices. The exploit involves a specific HTTP request structure to the 'global.login' endpoint, where the 'loginType' parameter is set to 'Loopback' and the 'ipAddr' is set to '127.0.0.1', attempting to leverage internal loopback logic to circumvent authentication mechanisms.